Description
Http-proxy is a proxying library. Because of the way errors are handled in versions before 0.7.0, an attacker that forces an error can crash the server, causing a denial of service.
Remediation
References
https://github.com/nodejitsu/node-http-proxy/pull/101
https://nodesecurity.io/advisories/323
Related Vulnerabilities
CVE-2022-31189 Vulnerability in maven package org.dspace:dspace-jspui
CVE-2023-44487 Vulnerability in maven package io.helidon.http:helidon-http-http2
CVE-2023-40817 Vulnerability in maven package org.opencrx:opencrx-core-models
CVE-2019-10284 Vulnerability in maven package org.jenkins-ci.plugins:diawi-upload
CVE-2023-24620 Vulnerability in maven package com.esotericsoftware.yamlbeans:yamlbeans